[plug] Am I Being Hacked?
Scott, Simon
Simon.Scott at SEALCORP.com.au
Tue May 9 13:29:11 WST 2000
Cleaner brings small child to work??? Child is happy slapping keys for five
minutes?
"With all the security bugs in JavaScript and all the pages that use
it, a lot of sites are best viewed with telnet www.something.com 80"
-- Darren Embry
> ------------------------------------------------------
> Simon Scott
> DBA
> Sealcorp Holdings Limited
> Perth, WA
> e-mail: simon.scott at sealcorp.com.au
> phone: 08 9265 5648
> ------------------------------------------------------
>
>
> -----Original Message-----
> From: Earnshaw, Mike [mailto:earnshawm at wa.switch.aust.com]
> Sent: Tuesday, 9 May 2000 1:24
> To: 'plug at plug.linux.org.au'
> Subject: RE: [plug] Am I Being Hacked?
>
>
> Mike,
>
> I thought the same, but the times given are after hours and
> the room is
> locked (I have one of the three keys, manager the other,
> cleaners master
> probably and admin key (which should be locked away after
> hours)). Maybe the
> cleaner .... we have no vermin that resemble cats (or feet
> warmers either
> ;-)
>
> The three consecutive attempts are what threw me.
>
> Mike
>
>
> > -----Original Message-----
> > From: Mike Holland [mailto:myk at golden.wattle.id.au]
> > Sent: Tuesday, May 09, 2000 1:13 PM
> > To: plug at plug.linux.org.au
> > Subject: Re: [plug] Am I Being Hacked?
> >
> >
> > On Tue, 9 May 2000, Christian wrote:
> >
> > > > May 8 17:49:59 usswa login[14597]: FAILED LOGIN 1 FROM
> (null) FOR
> > > > z.a^Z?toE~o^Pm%?^A^Ga^GLC, User not known to the
> > underlying authentication
> >
> > > added risk.) The fact that login is reporting that the
> > login attempt is
> > > from "(null)" is really odd -- if it were a network access
> > attempt then
> > > I would expect to see the address of the host there while
> a console
> > > login would obviously give the terminal line.
> >
> > On my redhat box, a console login give the '(null)' .
> > Could it be line noise from a loose serial cable, or an elbow
> > brushing the
> > keyboard ;-) Maybe your cat.
> >
> >
> > Mike Holland <mike at golden.wattle.id.au>
> > --==--
> > antispam: rot 13 my email xor with the first 20 letters of
> > the king james bible and run crypt to mail me.
> >
> >
> >
>
More information about the plug
mailing list